Re: [R] security using R at work

2018-08-09 Thread Bjørn-Helge Mevik
The section I'm working in runs a facility for sensitive research data (https://www.uio.no/english/services/it/research/sensitive-data/). Our users use R (along with other analysis software). We don't consider R safe or unsafe, but have designed the services so that it should not be possible (or

Re: [R] security using R at work

2018-08-09 Thread S Ellison
> If I install R on my work network computer, will the data ever leave our > network? As far as I know, if you run R locally (and not, say, on an amazon EC2 instance) your data - indeed anything about you or your machine - will only leave your desktop if you download and run an R package that

Re: [R] security using R at work

2018-08-09 Thread john matthew via R-help
T. > +44 (0)1925 289387 > @uknnl > > National Nuclear Laboratory Limited, 5th Floor, Chadwick House, > Birchwood Park, Warrington, WA3 6AE, UK > > www.nnl.co.uk > > > -Original Message- > From: R-help [mailto:r-help-boun...@r-project.org] On Behalf Of

Re: [R] security using R at work

2018-08-09 Thread Fritsch, Katharina (NNL) via R-help
Limited, 5th Floor, Chadwick House, Birchwood Park, Warrington, WA3 6AE, UK www.nnl.co.uk -Original Message- From: R-help [mailto:r-help-boun...@r-project.org] On Behalf Of Laurence Clark Sent: 08 August 2018 16:10 To: 'r-help@r-project.org' Subject: [R] security using R at work Hello all, I

Re: [R] security using R at work

2018-08-09 Thread john matthew via R-help
Hello Laurence. Taking a pragmatic approach. If the data is so valuable and secret but also needs some analysis in R, here is suggested steps to minimise security risks. 1. Plan the analysis up front, what exactly what you want and the outcomes. 2. Take a laptop with Internet, install R and all

Re: [R] security using R at work

2018-08-09 Thread Barry Rowlingson
On Thu, Aug 9, 2018 at 9:14 AM, Jan van der Laan wrote: > You can also inadvertently transmit data to the internet using a package > without being obviously 'stupid', e.g. by using a package that uses an > external service for data processing. For example, some javascript > visualisation libs can

Re: [R] security using R at work

2018-08-09 Thread Jan van der Laan
You can also inadvertently transmit data to the internet using a package without being obviously 'stupid', e.g. by using a package that uses an external service for data processing. For example, some javascript visualisation libs can do that (not sure if those wrapped in R-packages do), or,

Re: [R] security using R at work

2018-08-09 Thread Rainer M Krug
I can not agree more, Barry. Very nicely put. Rainer > On 8 Aug 2018, at 18:10, Barry Rowlingson > wrote: > > On Wed, Aug 8, 2018 at 4:09 PM, Laurence Clark > wrote: >> Hello all, >> >> I want to download R and use it for work purposes. I hope to use it to >> analyse very sensitive data

Re: [R] security using R at work

2018-08-09 Thread Rainer M Krug
This can likely be answered for R itself, but R itself (without additional packages) is very limited. As soon as you install packages, it all depends on the package you install and if you trust the authors of these packages. As far as I know, there is no code checking for security on CRAN

Re: [R] security using R at work

2018-08-08 Thread rsherry8
I consider R to be secure. It is possible, but very unlikely, that there are some back door traps in R where somebody could access your data. There is no software that is 100% secure and R is not 100% secure. Bob On 8/8/2018 11:09 AM, Laurence Clark wrote: Hello all, I want to download R

Re: [R] security using R at work

2018-08-08 Thread Rich Shepard
On Wed, 8 Aug 2018, Laurence Clark wrote: I want to download R and use it for work purposes. I hope to use it to analyse very sensitive data from our clients. Laurence, Good choice. My question is: If I install R on my work network computer, will the data ever leave our network? I need

Re: [R] security using R at work

2018-08-08 Thread Barry Rowlingson
On Wed, Aug 8, 2018 at 4:09 PM, Laurence Clark wrote: > Hello all, > > I want to download R and use it for work purposes. I hope to use it to > analyse very sensitive data from our clients. > > My question is: > > If I install R on my work network computer, will the data ever leave our >

[R] security using R at work

2018-08-08 Thread Laurence Clark
Hello all, I want to download R and use it for work purposes. I hope to use it to analyse very sensitive data from our clients. My question is: If I install R on my work network computer, will the data ever leave our network? I need to know if the data goes anywhere other than our network,